CVE-2018-20482
MediumAdvisory
Published 26 Dec 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.005
- 43rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 500
- of 17,781 indexed, latest versions
- Container images
- 332
- deployed by those charts
- Fix available
- 1 of 1
- affected package
tar - security update
Carried by container images the latest versions of 500 of 17,781 indexed charts deploy, on 332 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tardeb | 1.27.1-1, 1.27.1-1ubuntu0.1, 1.27.1-2+b1, 1.27.1-2+deb8u1+4 more | 1.27.1-1ubuntu0.1+esm1, 1.27.1-2+deb8u2, 1.28-2.1ubuntu0.2, 1.29b-1.1+deb9u1+1 more | 332 |
- OSV records
- UBUNTU-CVE-2018-20482DLA-1623-1DLA-2830-1
- Also known as
- USN-4692-1
Charts affected
500 by stars
Container images carrying it
332 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| omecproject/ | 24a389a0a4fe | tar | 1.29b-2ubuntu0.2 | 1 |
| omecproject/ | 5715e5648aa0 | tar | 1.28-2.1ubuntu0.2 | 1 |
| omecproject/ | 64776cb9edb3 | tar | 1.28-2.1ubuntu0.2 | 1 |
| omecproject/ | d109a8e57e71 | tar | 1.28-2.1ubuntu0.2 | 1 |
| ondrejsika/ | b1fd497416c8 | tar | 1.29b-1.1+deb9u1 | 1 |
| onosproject/ | 44914a8d4b3f | tar | 1.29b-2ubuntu0.2 | 1 |
| oomk8s/ | 3adf3d21ad3b | tar | 1.28-2.1ubuntu0.2 | 1 |
| opencord/ | 1d9ee8ce7fab | tar | 1.29b-1.1+deb9u1 | 1 |
| opendatacube/ | 5d810e8504b8 | tar | 1.29b-2ubuntu0.2 | 1 |
| opendatacube/ | 91870111837c | tar | 1.29b-2ubuntu0.2 | 1 |
| opendatacube/ | 1b90cdf68831 | tar | 1.29b-2ubuntu0.2 | 1 |
| openwhisk/ | b695a6ceb406 | tar | 1.29b-1.1+deb9u1 | 1 |
| openwhisk/ | c80dba0de3aa | tar | 1.29b-2ubuntu0.2 | 1 |
| opsmx11/ | 5c50ca123d88 | tar | 1.27.1-1ubuntu0.1+esm1 | 1 |
| osixia/ | 58cce1b08592 | tar | 1.29b-1.1+deb9u1 | 1 |
| osrm/ | c5c86a5b15ce | tar | 1.29b-1.1+deb9u1 | 1 |
| pachyderm/ | 94e9a281e5a4 | tar | 1.29b-1.1+deb9u1 | 1 |
| pachyderm/ | 2b27f41d4d02 | tar | 1.29b-1.1+deb9u1 | 1 |
| pcm32/ | 301fb89914ef | tar | 1.27.1-2+deb8u2 | 1 |
| pedrocesarti/ | 14851f144f57 | tar | 1.29b-1.1+deb9u1 | 1 |
| percona/ | eaa3fcb7a5a2 | tar | 1.27.1-2+deb8u2 | 1 |
| pihole/ | 8c172c4cf344 | tar | 1.29b-1.1+deb9u1 | 1 |
| plexinc/ | b598abb134ad | tar | 1.28-2.1ubuntu0.2 | 1 |
| polyakov/ | dbcef69146b8 | tar | 1.27.1-2+deb8u2 | 1 |
| pozetroninc/ | 53ae64f29da8 | tar | 1.29b-2ubuntu0.2 | 1 |
| pposkrobko/ | eaf260341dba | tar | 1.28-2.1ubuntu0.2 | 1 |
| rakii8585/ | 026082a515ac | tar | 1.29b-1.1+deb9u1 | 1 |
| rancher/ | e66f32d19eb9 | tar | 1.28-2.1ubuntu0.2 | 1 |
| raykrueger/ | c8baf3de57bb | tar | 1.29b-1.1+deb9u1 | 1 |
| resouer/ | e2f198b49ba7 | tar | 1.27.1-1ubuntu0.1+esm1 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | tar | 1.29b-1.1+deb9u1 | 1 |
| richardchesterwood/ | 36c43961214c | tar | 1.29b-1.1+deb9u1 | 1 |
| robotshop/ | 388349d5cb3c | tar | 1.29b-1.1+deb9u1 | 1 |
| robotshop/ | d545747c1b97 | tar | 1.29b-1.1+deb9u1 | 1 |
| robotshop/ | ea509182c180 | tar | 1.29b-1.1+deb9u1 | 1 |
| royalwang/ | df99e2499f91 | tar | 1.29b-1.1+deb9u1 | 1 |
| rundeck/ | 4d64fe56f767 | tar | 1.28-2.1ubuntu0.2 | 1 |
| rundeck/ | b13e8059ad72 | tar | 1.28-2.1ubuntu0.2 | 1 |
| scrapinghub/ | a5f89bc84606 | tar | 1.29b-2ubuntu0.2 | 1 |
| seldonio/ | 1d0da98a2d76 | tar | 1.28-2.1ubuntu0.2 | 1 |
| sismics/ | f4b0ef019cf1 | tar | 1.29b-2ubuntu0.2 | 1 |
| slagattollas/ | 6dd8ead8e2b1 | tar | 1.29b-1.1+deb9u1 | 1 |
| softonic/ | d9c57e76e669 | tar | 1.29b-1.1+deb9u1 | 1 |
| softonic/ | f0d3dcecce5e | tar | 1.29b-1.1+deb9u1 | 1 |
| stakater/ | 4f8e409f30c2 | tar | 1.27.1-2+deb8u2 | 1 |
| tensorflow/ | 1e3172090703 | tar | 1.28-2.1ubuntu0.2 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | tar | 1.28-2.1ubuntu0.2 | 1 |
| timothyclarke/ | 40a80ced8031 | tar | 1.27.1-2+deb8u2 | 1 |
| tpdock/ | 3da600c95a49 | tar | 1.28-2.1ubuntu0.2 | 1 |
| ubercadence/ | 8564a5b44a6d | tar | 1.29b-1.1+deb9u1 | 1 |